
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8sk-IJlAjN4-dsk1bF5ibxTyEUc.roa
File: 8sk-IJlAjN4-dsk1bF5ibxTyEUc.roa (raw, json)
Hash identifier: eVo4ttFE76DI5fdAIEnXO4RJXQIZPsKYd724nYiZV0c=
Subject key identifier: F2:C9:3E:20:99:40:8C:DE:3E:76:C9:35:6C:5E:62:6F:14:F2:11:47
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1752
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8sk-IJlAjN4-dsk1bF5ibxTyEUc.roa
Signing time: Tue 31 Mar 2026 08:03:35 +0000
ROA not before: Tue 31 Mar 2026 08:03:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 220.210.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5970 (0x1752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F2C93E2099408CDE3E76C9356C5E626F14F21147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:b8:6e:90:95:2e:7f:28:70:c3:1b:a8:57:
d9:bc:b2:05:cd:15:e4:48:92:1c:19:9f:b6:c1:30:
45:03:f1:80:37:c0:e4:3e:1a:60:b8:44:66:ae:0c:
7b:94:0d:21:78:6d:aa:53:1e:c9:c3:c8:4a:99:f2:
1f:72:3b:57:60:a4:6f:57:46:64:9b:de:24:38:ae:
e6:86:5a:36:1c:97:e0:e6:c0:3a:db:2d:4f:14:ed:
14:a6:83:ed:41:5b:76:bb:78:5f:0d:f8:cf:ed:66:
a0:3f:43:84:99:83:fe:26:65:0b:d7:2e:b0:06:ee:
0e:18:42:bf:3e:cb:60:70:12:a0:08:ca:0f:5d:09:
c6:48:95:ea:09:7d:7b:27:34:6d:93:ed:61:82:7a:
9f:39:dd:ab:93:71:19:1d:ce:0b:bd:d5:65:7f:95:
8e:37:b7:bc:57:35:01:50:e2:b5:8f:29:74:a8:c5:
f0:21:db:0e:e4:ae:fb:44:88:db:c8:b0:17:e7:54:
7e:8c:b7:2a:11:87:60:e4:11:df:b7:2e:f5:ad:37:
dc:18:98:f9:93:eb:3f:88:d3:83:6c:23:fa:74:0e:
5c:da:89:e8:ad:85:88:be:0c:e8:4d:5b:60:03:7b:
07:9c:8d:53:36:6c:3a:43:60:72:22:4f:15:38:5f:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:3E:20:99:40:8C:DE:3E:76:C9:35:6C:5E:62:6F:14:F2:11:47
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8sk-IJlAjN4-dsk1bF5ibxTyEUc.roa
sbgp-ipAddrBlock: critical
IPv4:
220.210.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:77:c0:39:32:9e:12:03:5a:a7:2b:f8:13:0e:5c:16:79:d9:
5d:99:87:93:3f:f9:12:f3:f1:07:dd:76:45:ad:2e:ce:1a:ff:
bd:df:1f:a3:c5:b6:d1:78:2e:df:3b:c5:78:4f:00:fc:6b:1c:
94:c4:b1:97:ca:da:2c:de:df:b5:8f:99:2a:fc:25:ca:97:34:
ba:82:72:1a:c6:73:ba:ef:f8:d2:56:5e:89:97:9a:02:b7:ac:
6e:cf:53:97:08:b0:3e:42:12:65:c0:43:a1:74:06:3b:59:45:
10:74:7e:76:7c:b1:dd:3a:ac:0a:d1:c4:0f:67:74:c8:68:98:
ce:fe:99:db:35:8e:fc:0b:25:e0:34:40:8b:14:0e:33:7b:8b:
86:73:2e:f1:e9:ef:24:f2:d1:bc:6c:d3:35:89:ed:7f:8a:36:
29:27:c0:6b:c5:0b:02:d3:8a:97:18:34:1b:ab:3d:b3:77:ff:
b8:5a:3e:19:fc:52:07:84:bf:26:0d:08:e9:d4:85:bc:fc:a9:
dc:27:bd:96:98:93:82:51:f9:82:b5:57:64:0f:4d:f6:55:84:
dd:cc:eb:ce:37:92:b7:41:7c:fa:0c:68:9e:c5:f3:23:0e:d5:
67:36:8c:35:25:28:66:a1:77:04:13:64:84:b9:a5:d6:f4:a4:
3c:0a:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:09 2026 by rpki-client